Vulnerabilities > Ericsson > Enterprise Content Management > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-09-17 CVE-2021-41391 Cross-site Scripting vulnerability in Ericsson Enterprise Content Management 18.0
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
network
low complexity
ericsson CWE-79
5.4